Privacy Policy

Introduction

Elvora ("we", "us" or "our") respects your privacy. In this Privacy Policy, we explain what personal data we collect when you visit our website, place an order, contact us, or otherwise make use of our services (the "Services"), why we process that data, and what rights you have.

Elvora is operated by Ecom Dynasty Ltd, a company registered in the United Kingdom, primarily serving customers in the United Kingdom. We comply with both the UK General Data Protection Regulation (UK GDPR) and the EU General Data Protection Regulation (EU GDPR) as applicable.

Our webshop runs on Shopify. Shopify provides the e-commerce platform through which we offer our products and services.

Who is responsible for your data?
The controller responsible for the processing of personal data via this webshop is:

Store Name: Elvora
Operated by: Ecom Dynasty Ltd
Company Number: 17092533
Address: Office 9278af, 182-184 High Street North, Area 1/1, East Ham, London E6 2JA, United Kingdom
Email: info@elvoraco.com
Phone: +44 7520 654517
Website: https://elvoraco.com
Opening Hours: Monday to Friday, 9:00 AM to 6:00 PM GMT
Response Time: Within 24 hours during business days

What personal data do we process?
Depending on how you use our Services, we may process the following data:

a) Identification and contact details

Name Email address Phone number Billing address and delivery address

b) Order and transaction data

Ordered products Order number Payment status and (limited) payment information (payments are generally processed via payment providers; we do not always receive your full card details) Return and exchange data Customer service communications regarding your order

c) Communication data

Content of messages you send us (email or contact form) Attachments you include (e.g. photos submitted with a complaint)

d) Technical and usage data

IP address Browser and device information Log files Interactions on the website (e.g. pages viewed, click behaviour) Cookies and similar technologies (see "Cookies")

Sources of personal data
We obtain personal data:

Directly from you (e.g. when placing an order or contacting us) Automatically via the website (e.g. cookies, log files) Via service providers (e.g. Shopify, payment providers, shipping partners, analytics partners)

Data from suppliers and logistics partners:

Order tracking information from shipping partners Product return information from suppliers

We only receive data that is necessary for order fulfilment and customer service.

Why do we process your personal data? (Purposes)
We process personal data for:

a) Orders and fulfilment of the agreement

Processing and delivering orders Processing payments Handling returns and refunds Sending order updates and service messages

b) Customer service

Answering questions and providing support via email and contact form Resolving complaints and issues For information about our return policy, please see our Returns and Refunds Policy. For returns, we process data such as return reasons and product status solely for the purpose of handling your return and any associated refund.

c) Improving the website and security

Website security, fraud prevention, and abuse detection Analysis to improve the webshop and customer experience

d) Marketing (where permitted)

Sending newsletters or offers (with consent where required; you can always unsubscribe)

e) Legal obligations

Administration and tax obligations Evidence in disputes or compliance with legislation

Legal bases (UK GDPR and EU GDPR)
We process your personal data on the basis of one or more of the following legal grounds under both the UK GDPR and the EU GDPR:

Performance of a contract (e.g. purchase and delivery) Legal obligation (e.g. statutory retention for tax purposes) Legitimate interest (e.g. fraud prevention, basic analytics, customer service improvement) Consent (e.g. newsletter subscription and certain cookies, where required)

With whom do we share personal data?
We share personal data only when necessary for our services, legal obligations, or with your consent. This includes:

Shopify (webshop platform and hosting) Payment providers (to process payments) Shipping and fulfilment partners (to deliver your parcel) IT and support service providers (hosting, email tools) Analytics partners (only to the extent permitted via cookies and consent)

We do not sell your personal data.

Analytics partners:

Google Analytics (website statistics and user behaviour) Google Ads (remarketing and conversion tracking)

These partners may place cookies to track browsing behaviour for analytics and advertising purposes. You can decline these cookies via our cookie settings.

International transfers
Elvora is based in the United Kingdom. Personal data may be transferred between the UK and the EEA, and to third countries where our service providers operate (such as Shopify and Google).

Where personal data is transferred outside the UK or the EEA, we ensure appropriate safeguards are in place in accordance with the UK GDPR and the EU GDPR, such as:

Standard Contractual Clauses (SCCs) approved by the European Commission International Data Transfer Agreements (IDTAs) or the UK Addendum to SCCs, as required under UK law Adequacy decisions (countries recognised as providing an adequate level of data protection)

The UK has been granted an adequacy decision by the European Commission, meaning personal data can flow freely between the EEA and the UK.

Cookies and similar technologies
We use cookies and similar technologies to:

Ensure the website functions properly (essential cookies) Gain insight into website usage (analytics) Enable marketing and personalised advertising (marketing cookies)

Cookie consent: When you visit our website, we ask for your consent via a cookie banner for non-essential cookies (analytics and marketing).

Necessary cookies are always placed Analytics and marketing cookies are placed ONLY after your explicit consent You can withdraw your consent at any time via the cookie settings If you decline, we only place technically necessary cookies

You can also manage your cookie preferences via your browser settings. Please note: disabling certain cookies may affect the functioning of the site.

Retention periods
We do not retain personal data longer than necessary. Guidelines:

Order and invoice data: as long as required under applicable tax legislation (typically 7 years) Customer service communications: as long as necessary for handling and any disputes Marketing data: until you unsubscribe or withdraw consent

Marketing communications:

We only send marketing emails if you have explicitly opted in You can always unsubscribe via the link at the bottom of every email After unsubscribing, we remove your email address from our marketing list

Security
We take appropriate technical and organisational measures to protect your data against loss, misuse, and unauthorised access. No system is 100% secure; please take care when sharing sensitive information via unsecured channels.

Your rights
Under both the UK GDPR and the EU GDPR, you have (subject to conditions) the following rights:

Right of access Right to rectification (correction) Right to erasure ("right to be forgotten") Right to restriction of processing Right to data portability Right to object (including against direct marketing) Right to withdraw consent (where processing is based on consent)

You can submit a request via: info@elvoraco.com. We may ask you to verify your identity. We aim to respond to all requests within one month.

Complaints
If you believe we are not handling your personal data correctly, please let us know first so we can resolve the matter.

You also have the right to lodge a complaint with the relevant supervisory authority:

For UK residents: Information Commissioner's Office (ICO) Website: www.ico.org.uk Phone: 0303 123 1113

For EEA residents: Hellenic Data Protection Authority (HDPA) Website: www.dpa.gr

Children's data
Our Services are not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently received data from a child, please contact us and we will delete it where appropriate.

Automated decision-making
We do not use automated decision-making or profiling that has legal consequences for you, or that significantly affects you.

One exception: our payment system uses automated fraud detection to block suspicious transactions, for the protection of both you and our webshop. You can always contact us if you believe a payment has been blocked incorrectly.

Changes to this Privacy Policy
We may update this Privacy Policy (e.g. due to changes in legislation or our services). The most recent version is always available on our website. For significant changes, we will provide additional notice where appropriate.

← Back to Home